Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 16:59:40.850 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56248 10 6452 1 2025-11-24 17:00:41.272 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60408 10 6452 1 2025-11-24 17:01:41.633 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51400 10 6452 1 2025-11-24 16:58:05.653 00:05:01.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 16:58:05.651 00:05:01.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 17:02:19.662 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:02:19.685 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:02:19.449 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:02:19.737 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:02:19.532 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:02:42.037 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42208 10 6452 1 2025-11-24 17:03:42.439 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58478 10 6452 1 2025-11-24 17:04:42.842 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53550 10 6452 1 2025-11-24 17:05:43.264 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36586 10 6452 1 2025-11-24 17:06:43.627 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42056 10 6452 1 2025-11-24 17:07:19.499 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:07:19.331 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:07:19.582 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:07:19.621 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:07:19.665 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:07:44.034 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49876 10 6452 1 2025-11-24 17:04:05.655 00:05:01.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 17:04:05.652 00:05:01.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 17:08:44.432 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45972 10 6452 1 2025-11-24 17:09:44.851 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33788 10 6452 1 2025-11-24 17:10:45.277 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48332 10 6452 1 2025-11-24 17:11:45.697 00:00:10.531 TCP 1.101.0.1:3000 -> 23.104.0.1:50694 10 6452 1 2025-11-24 17:12:19.867 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:12:19.710 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:12:19.825 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:12:19.680 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:12:19.908 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:12:46.271 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47976 12 6556 1 2025-11-24 17:13:46.677 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56012 10 6452 1 2025-11-24 17:10:05.655 00:05:01.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 17:10:05.657 00:05:01.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 17:14:47.035 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51006 10 6452 1 2025-11-24 17:15:47.438 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:33846 10 6452 1 2025-11-24 17:16:47.809 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34406 10 6452 1 2025-11-24 17:17:19.676 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:17:19.969 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:17:19.857 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:17:19.856 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:17:19.940 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:17:48.214 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47130 10 6452 1 2025-11-24 17:18:48.578 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46286 10 6452 1 2025-11-24 17:19:48.978 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51426 10 6452 1 2025-11-24 17:16:05.658 00:05:01.046 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 17:16:05.657 00:05:01.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 17:20:49.389 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46618 10 6452 1 2025-11-24 17:21:49.760 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:41966 10 6452 1 2025-11-24 17:22:19.843 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:22:19.966 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:22:19.849 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:22:19.949 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:22:19.932 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:22:50.182 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33558 10 6452 1 2025-11-24 17:23:50.584 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:52356 10 6452 1 2025-11-24 17:24:50.962 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:35518 10 6452 1 2025-11-24 17:25:51.322 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:32850 10 6452 1 2025-11-24 17:22:05.657 00:05:01.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 17:22:05.660 00:05:01.045 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 17:26:51.808 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40678 10 6452 1 2025-11-24 17:27:20.581 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:27:20.232 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:27:20.475 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:27:20.498 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:27:20.341 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:27:52.212 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58002 10 6452 1 2025-11-24 17:28:52.609 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32804 10 6452 1 2025-11-24 17:29:53.015 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42882 10 6452 1 2025-11-24 17:30:53.418 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55266 10 6452 1 2025-11-24 17:31:53.819 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44520 10 6452 1 2025-11-24 17:28:05.664 00:05:01.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 17:28:05.661 00:05:01.048 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 17:32:20.302 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:32:20.183 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:32:19.981 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:32:20.220 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:32:20.141 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:32:54.227 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39414 10 6452 1 2025-11-24 17:33:54.628 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33312 10 6452 1 2025-11-24 17:34:55.030 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36876 10 6452 1 2025-11-24 17:35:55.431 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36030 10 6452 1 2025-11-24 17:36:55.836 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:50182 10 6452 1 2025-11-24 17:37:20.340 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:37:20.415 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:37:20.269 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:37:20.512 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:37:20.352 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:34:05.665 00:05:01.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 17:37:56.261 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52410 10 6452 1 2025-11-24 17:34:05.662 00:05:01.048 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 17:38:56.664 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47642 10 6452 1 2025-11-24 17:39:57.094 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:55218 10 6452 1 2025-11-24 17:40:57.462 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45866 10 6452 1 2025-11-24 17:41:57.871 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33448 10 6452 1 2025-11-24 17:42:20.447 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:42:20.373 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:42:20.222 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:42:20.365 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:42:20.412 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:42:58.242 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40148 10 6452 1 2025-11-24 17:43:58.612 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56902 10 6452 1 2025-11-24 17:40:05.667 00:05:01.041 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 17:40:05.665 00:05:01.046 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 17:44:59.018 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58972 10 6452 1 2025-11-24 17:45:59.382 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33738 10 6452 1 2025-11-24 17:46:59.745 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35116 10 6452 1 2025-11-24 17:47:20.545 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:47:20.372 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:47:20.480 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:47:20.463 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:47:20.516 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:48:00.146 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55718 10 6452 1 2025-11-24 17:49:00.560 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36348 10 6452 1 2025-11-24 17:46:05.666 00:05:01.046 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 17:46:05.668 00:05:01.041 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 17:50:00.929 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:57264 10 6452 1 2025-11-24 17:51:01.355 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56168 10 6452 1 2025-11-24 17:52:01.755 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38616 10 6452 1 2025-11-24 17:52:20.671 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:52:20.660 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:52:20.651 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:52:20.739 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:52:20.743 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:53:02.153 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53758 10 6452 1 2025-11-24 17:54:02.520 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54950 11 6504 1 2025-11-24 17:55:02.941 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:36406 10 6452 1 2025-11-24 17:52:05.668 00:05:01.045 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 17:52:05.671 00:05:01.039 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 17:56:03.348 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57484 10 6452 1 2025-11-24 17:57:03.767 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44410 10 6452 1 2025-11-24 17:57:20.716 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:57:20.789 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 17:57:20.740 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 17:57:20.653 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 17:57:20.873 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 17:58:04.181 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59304 10 6452 1 Summary: total flows: 139, total bytes: 410704, total packets: 1013, avg bps: 910, avg pps: 0, avg bpp: 405 Time window: 2025-11-24 16:58:05 - 2025-11-24 17:58:14 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0046s User: 0.0018s Wall: 0.0022s flows/second: 62167.7 Runtime: 0.0023s